4507 matches found
PT-2025-37172
Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a SQL injection issue. An attacker can retrieve, create, update, and delete database information via the teamid parameter in the...
CVE-2025-40690: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'...
PT-2025-37170
Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a SQL injection flaw. This flaw allows an attacker to retrieve, create, update, and delete database information via the mobilenumber, teamleadname...
CVE-2025-9943
The Shibboleth Service Provider (SP) is vulnerable to a blind SQL injection in the "ID" attribute of the SAML response. This issue occurs when the replay cache is configured to use an SQL database as a storage service and the database connection utilizes the ODBC plugin . The root cause is insuff...
PT-2025-36976
Name of the Vulnerable Software and Affected Versions: OPEXUS FOIAXpress Public Access Link PAL versions prior to 11.13.1.0 Description: A SQL injection flaw exists in OPEXUS FOIAXpress Public Access Link PAL via the SearchPopularDocs.aspx page. A remote, unauthenticated attacker could potentiall...
CVE-2025-41032
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...
CVE-2025-41033
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BPage%5D%5Bname%5D' parameter in /apprain/page/manage-dynamic-pages/create...
CVE-2025-0280
A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...
CVE-2025-41032
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...
CVE-2025-41034 SQL injection vulnerability in appRain CMF
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BPage%5D%5Bname%5D' parameter in /apprain/page/manage-static-pages/create/...
CVE-2025-41032 SQL injection vulnerability in appRain CMF
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...
CVE-2025-41032
The CVE-2025-41032 entry concerns appRain CMF 4.0.5 with an SQL injection vulnerability in the parameter data[Admin][username] of the /apprain/admin/manage/add/ endpoint. Reported to allow an attacker to retrieve, create, update, and delete data in the back-end database. The vulnerability is desc...
appRain CMF SQL注入漏洞
appRain CMF is a content management framework. appRain CMF suffers from an SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the data%5BPage%5D%5Bname%5D parameter of /apprain/page/manage-dynamic-pages/create. An attacker could use this...
CVE-2025-41034: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BPage%5D%5Bname%5D' parameter in /apprain/page/manage-static-pages/create/...
CVE-2025-0280
A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...
CVE-2025-0280 HCL Compass is affected by a security vulnerability
A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...
CVE-2025-0280
CVE-2025-0280 affects HCL Compass. Multiple sources describe a vulnerability that could allow an attacker to gain unauthorized access to the database. The NVD entry lists CVSS 3.1 vectors: Local attack, high impact on confidentiality/integrity/availability, high attack complexity, low privileges ...
CVE-2025-0280 HCL Compass is affected by a security vulnerability
A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...
PT-2025-35783
Name of the Vulnerable Software and Affected Versions HCL Compass affected versions not specified Description A security vulnerability in HCL Compass can allow an attacker to gain unauthorized database access. Recommendations At the moment, there is no information about a newer version that...